What is the CreateExplorerShellUnelevatedTask scheduled task?
source link: https://devblogs.microsoft.com/oldnewthing/20220524-00/?p=106682
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
What is the CreateExplorerShellUnelevatedTask scheduled task?
Raymond Chen
May 24th, 20221
Explorer needs to run non-elevated because it needs to be available to other applications which aren’t necessarily elevated. To ensure that it can do that, Explorer detects that it is running elevated and de-elevates itself by using a scheduled task called CreateExplorerShellUnelevatedTask which does what it says on the tin: It launches Explorer un-elevated. The elevated version of Explorer exits after asking the scheduled task to run.
So the elevated Explorer exits, and is replaced by an un-elevated Explorer.
A customer wanted to know why, when they looked at several of the servers they had deployed, some of them have the CreateExplorerShellUnelevatedTask and some don’t. Does this mean that the systems which don’t have the special task have been corrupted or compromised?
No need to worry.
The CreateExplorerShellUnelevatedTask is created on demand when Explorer is first launched elevated. If your system doesn’t have this task, then pat yourself on the back. It means that your system hasn’t ever needed it.
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK